Test Canvas tainting and WebGL video textures (CORS fetched.)

Test Canvas tainting and WebGL video textures (CORS fetched.)

Verify that cross-origin video resources follow the required Canvas
tainting rules when included in textures via texImage2D().

R=kbr
BUG=173727
Committed: https://src.chromium.org/viewvc/blink?view=rev&revision=162487

[sof, 2013-11-21 09:06:06]

At your own leisure, please take a look.

I put the tainting tests alongside the ones for Image in http/tests/security

[jochen (gone - plz use gerrit), 2013-11-21 13:16:06]

bots disagree with you?

[sof, 2013-11-21 13:16:23]

Thanks to whoever started the trybots :)

..blocked-no-crossorigin is reported as failing. I can't reproduce locally, but
am investigating further.

[sof, 2013-11-21 13:51:29]

On 2013/11/21 13:16:23, sof wrote:
> Thanks to whoever started the trybots :)
> 
> ..blocked-no-crossorigin is reported as failing. I can't reproduce locally,
but
> am investigating further.

Oh, I'm indirectly to blame (via https://codereview.chromium.org/80363002/ ) :)

Rebasing + tweaking expected outputs; sorry about the minor mess.

[sof, 2013-11-21 14:23:59]

On 2013/11/21 13:16:06, jochen wrote:
> bots disagree with you?

Hopefully sorted out now.

[jochen (gone - plz use gerrit), 2013-11-21 14:25:17]

kicking off tryjobs again :)

[Ken Russell (switch to Gerrit), 2013-11-21 18:46:20]

That's excellent. Thank you for adding these. LGTM

It would be really good to add tests like these to the WebGL conformance suite
(github.com/KhronosGroup/WebGL), though there currently aren't any CORS tests in
that suite. sdk/tests/conformance/textures/origin-clean-conformance.html is the
closest thing, relying on a third-party server, but it doesn't test that CORS
image fetches are allowed to be uploaded as textures.

The media would have to be hosted on a high-availability server supporting CORS
requests, different from the standard one that hosts the conformance suite
(www.khronos.org). If you have any ideas about how to set this up, please
contact me offline.

[commit-bot: I haz the power, 2013-11-21 18:56:03]

CQ is trying da patch. Follow status at
https://chromium-status.appspot.com/cq/sigbjornf@opera.com/80263004/80001

[commit-bot: I haz the power, 2013-11-21 19:53:35]

Change committed as 162487